last executing test programs: 20.141777973s ago: executing program 3 (id=6554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.652484454s ago: executing program 3 (id=6558): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_setup(0x10, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0}]) 18.095983835s ago: executing program 3 (id=6560): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000580)=[{r1, 0x1c0}, {r0}], 0x2, 0x0, 0x0, 0x0) 16.821485586s ago: executing program 3 (id=6562): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_err_ignore}]}, 0x3, 0x4db, &(0x7f0000000500)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 15.830188518s ago: executing program 3 (id=6567): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0xe3, 0x3e, 0x50, 0x10, 0x2c42, 0x16f8, 0x468b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x69, 0x2d, 0xaf, 0x9, [], [{{0x9, 0x5, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 12.465839029s ago: executing program 2 (id=6586): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 12.0548961s ago: executing program 2 (id=6589): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 11.666744005s ago: executing program 2 (id=6592): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x101001) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="bbef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) 11.24514669s ago: executing program 2 (id=6595): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x400000, &(0x7f0000000180)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @ptr=0x20001100}}) 10.440214623s ago: executing program 3 (id=6597): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mremap(&(0x7f00002c4000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000055c000/0x2000)=nil) 10.433149488s ago: executing program 2 (id=6598): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f060b79", 0x4}], 0x1}, 0x40) recvmsg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1, 0x0, 0xe}, 0x0) 9.241748243s ago: executing program 2 (id=6602): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000900000048000380050008007f000000060007004e21000014000200626174616476300000000000000000000800010002000000080003"], 0x5c}}, 0x0) 8.908006076s ago: executing program 4 (id=6605): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_open(&(0x7f0000001140)='rmdF\x17\x16\xbc\xec', 0x1, 0x4, 0x0) 8.816041282s ago: executing program 5 (id=6607): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x23, &(0x7f00000002c0)={{r0}, 0x0, 0x0}, 0x20) 8.583542087s ago: executing program 4 (id=6608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 8.524011875s ago: executing program 5 (id=6609): mknod(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syz_mount_image$sysv(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x1000000, &(0x7f0000000f40)=ANY=[], 0x1, 0x9ec0, &(0x7f0000015380)="$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") stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)) 8.261127955s ago: executing program 4 (id=6611): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 8.1837312s ago: executing program 5 (id=6612): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000000)={[{@nodecompose}, {@nobarrier}, {}, {@part={'part', 0x3d, 0x1000003}}, {@barrier}, {@nodecompose}, {@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'cp865'}}]}, 0x1, 0x5e7, &(0x7f0000001a00)="$eJzs3U9rHOcdB/DvrGTZcsFREjtJS0uFfWiJqa3VJo4OBbulFB1CCfSSSw7CXsfCayVIm6KEUuT+vfYdJD3I5556KD0Y0nPfgqCHHAq96+Yys7OrjSXLK8fRrprPB559ntln5vnz88yjnVnMBvjGWn43px6myPLltzfL7Z3tVmdnu3WvX05yOkkjme5lKdaS4vPkRnop3y7frJsrntTPe5++tfRF88H93tZ0nar9G4cdN5qtOmU+yVSdH9H0k9q7+WztDSkGMywDdqkfOBi3R/tsHeXwr3jdApOg6P3d3GcuOZvkTP05IPXq0Dje0T1/R1rlAAAA4IR6YTe72cy5cY8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATpL69/+LOjX65fkU/d//n6nfS10+0R6OewAAAAAAAAAA8Bx8v9jazWbO9bcfFdV3/herjfPV67fyUTbSznquZDMr6aab9TSTzA01NLO50u2uN0c4cvHAIxePZ74AAAAAAAAA8H/qt1ne+/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmQZFM9bIqne+X59KYTnImyUy531byj375JHs47gEAAADAMXhhN7vZzLn+9qOiuud/pbrvP5OPspZuVtNNJ+3cqp4F9O76Gzvbrc7Odutemfa3+5P/HmkYVYvpPXs4uOeFao9icMRyfp5f5nLm807Ws5pfZSXdtDOfn1WllRSZq59ezPXHefB4b3xp652njfW1aiSzuZ3VamxXcjMfpJNbaVRzqPY5vMf7ZXSKqVyvjBijW3VezujPdT4Z5qqInBpEZKGOfRmNFw+PxBHPk8d7aqYxeAZ1fpSYX79+pJifrfMy1n+c6JgvDp19rxweieTiv7/3tzudtbt3bm9cnpwpPaPHI9EaisSr36hIzNTR6K2ijVwY1Dx9tbxYHXsuq/lFPsittPNmlvJmFvNG3shClnJtKK4XRrjWGke71i79sC7MJvlTnU+GMq4vDsV1eKWbq+qG39mL0kvPf0Wa/k5dKPv4XZ1Phscj0RyKxMuHR+Ivj8rXjc7a3fU7Kx+O2N8P6ry8bP8wUWtzeb68VP5jVVtfPjvKupcPrGtWdecHdY19dRcGdU+7Umfqz3D7W1qs6l49sK5V1b02VHfQpxwAJt7Z18/OzP5n9l+zn83+fvbO7Ntnfnp66fR3Z3Lqn9N/n/pr40Hjx8Xr+Sy/2bv/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnt3Gx5/cXel02usKCgoKg8K4Vybg63a1e+/Dqxsff/Kj1Xsr77ffb6+1Ws1ri0vXlhavXb292mkv9F7HPUzga7D3R3/cIwEAAAAAAAAAAABGdRz/nWDccwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtuV3c+phijQXriykSLLd6uxstzplXT/vmU7SSFL8Oik+T26klzI31FzxpH7e+/StpS+aD+7vtTXd379x2HGj2apT5pNM1fnzau/mV26vGMywDNilfuBg3P4XAAD//9JPDIE=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000880)=""/150, 0x96) 7.717707476s ago: executing program 5 (id=6613): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 7.482431307s ago: executing program 5 (id=6614): unshare(0x2040400) r0 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000180)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}) 7.215491453s ago: executing program 5 (id=6615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private0}}, {0x4, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) 6.221310836s ago: executing program 4 (id=6618): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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") setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) 5.268551446s ago: executing program 1 (id=6621): r0 = syz_usbip_server_init(0x1) syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2018402, &(0x7f0000000c00)=ANY=[@ANYBLOB='iocharset=cp932,iocharset=iso8859-2,integrity,errors=remount-ro,nodiscard,grpquota,grpquota\x00noquota,noquota,resize=0xffffffffffffffff,uid=', @ANYRESHEX=0x0, @ANYBLOB=',grpquota,nointegrity,integrity,usrquota,obj_type=nodiscard,pcr=00000000000000000055,fowner>', @ANYRESDEC=0x0, @ANYBLOB="8e81284fa8cbb5301d45eaade5bddc78afdb4d1e4411a3137afcac52e080525950b494329c0421253dfea9dddb1ebb4844a59c1336e7d0d75503c302b86e955c86fa33baa1d56e648f56e713b572f275e9519940124ff188b4629ca29c890285ccf7cda99acd827d81a75ede5d7f684882484e747ad80b213b27b0fa2ca3695fb82264164625c37be9bd3a7e2eb9000000000000000000"], 0xfe, 0x6159, &(0x7f0000003800)="$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") write$usbip_server(r0, &(0x7f0000009980)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x80}, 0x10, 0x2, 0x7, 0x0, 0x0, 0x0, "6da6"}, 0x32) 4.770019321s ago: executing program 0 (id=6623): mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x3, 0x0) 4.202473226s ago: executing program 4 (id=6624): unshare(0x22020600) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x74000020) 3.994995177s ago: executing program 4 (id=6625): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) 3.658227902s ago: executing program 0 (id=6626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000a40)="c599bbe5", &(0x7f0000000d40), 0x2, r1}, 0x38) 3.427093851s ago: executing program 0 (id=6627): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x5, 0x0, &(0x7f0000001800)=[{0x0}], 0x0, 0x1}, 0x20) 3.196738997s ago: executing program 0 (id=6628): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) 2.971423246s ago: executing program 0 (id=6629): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2.540602979s ago: executing program 0 (id=6630): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r0, &(0x7f00000000c0)="2400000012005f0214fffffffffffff807000300b800000000000000080008001d000000", 0x24) 1.127343151s ago: executing program 1 (id=6631): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 814.614877ms ago: executing program 1 (id=6632): r0 = socket$isdn(0x22, 0x2, 0x25) r1 = socket$isdn(0x22, 0x2, 0x4) dup3(r1, r0, 0x0) 476.233794ms ago: executing program 1 (id=6633): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x5) 237.714465ms ago: executing program 1 (id=6634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 0s ago: executing program 1 (id=6635): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 855][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 469.719818][T18080] ext4 filesystem being mounted at /979/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.721935][ T25] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 469.741624][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.754289][ T25] usb 6-1: config 0 descriptor?? [ 469.825269][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.207798][ T25] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 470.224771][ T25] microsoft 0003:045E:07DA.001A: No inputs registered, leaving [ 470.244624][ T25] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 470.256871][ T25] microsoft 0003:045E:07DA.001A: no inputs found [ 470.258093][T18098] loop3: detected capacity change from 0 to 1024 [ 470.263389][ T25] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 470.363678][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 470.387651][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system [ 470.445885][ T62] hfsplus: b-tree write err: -5, ino 4 [ 470.540459][ T25] usb 6-1: USB disconnect, device number 34 [ 470.602424][T18104] loop3: detected capacity change from 0 to 2048 [ 470.631793][T18104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.675470][ T5556] udevd[5556]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 470.691307][ T5556] udevd[5556]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 470.835632][T18110] loop3: detected capacity change from 0 to 256 [ 471.207516][T18106] loop2: detected capacity change from 0 to 32768 [ 471.224903][T18106] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5597 (18106) [ 471.333851][T18106] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 471.344064][T18106] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 471.367878][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:2' failed: Read-only file system [ 471.405978][T18106] BTRFS info (device loop2): using free-space-tree [ 471.740634][T18144] tmpfs: Cannot change global quota limit on remount [ 471.835188][T18132] loop3: detected capacity change from 0 to 4096 [ 472.041413][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 472.097032][T18132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.121635][ T5253] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 472.141068][ T5253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 472.164404][ T5253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 472.200402][ T5253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 472.215122][T18106] BTRFS info (device loop2): checking UUID tree [ 472.277597][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.286915][ T5253] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 472.306222][ T5253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 472.427567][T18140] loop0: detected capacity change from 0 to 32768 [ 472.472251][T18140] XFS: ikeep mount option is deprecated. [ 472.537402][ T5254] udevd[5254]: symlink '../../loop2' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:2' failed: Read-only file system [ 472.572679][T18140] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 472.631575][ T5507] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 472.676469][T18140] XFS (loop0): Ending clean mount [ 472.683924][T18140] XFS (loop0): Quotacheck needed: Please wait. [ 472.860870][T18140] XFS (loop0): Quotacheck: Done. [ 472.963103][T18184] loop3: detected capacity change from 0 to 256 [ 473.044669][T18184] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 473.057012][ T5229] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 473.251551][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 473.401535][T18195] loop3: detected capacity change from 0 to 8 [ 473.460507][T18195] SQUASHFS error: lzo decompression failed, data probably corrupt [ 473.493153][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.541827][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.544117][T18195] SQUASHFS error: Failed to read block 0x91: -5 [ 473.573417][T18145] chnl_net:caif_netlink_parms(): no params data found [ 473.587354][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 473.598731][T18195] SQUASHFS error: Unable to read metadata cache entry [8f] [ 473.618101][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.663448][T18195] SQUASHFS error: Unable to read inode 0x11f [ 473.692474][ T9] usb 3-1: config 0 descriptor?? [ 474.143581][T18145] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.159180][T18145] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.186776][ T9] uclogic 0003:28BD:0074.001B: interface is invalid, ignoring [ 474.194803][T18145] bridge_slave_0: entered allmulticast mode [ 474.201822][T18145] bridge_slave_0: entered promiscuous mode [ 474.222267][T18145] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.230026][T18145] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.253356][T18145] bridge_slave_1: entered allmulticast mode [ 474.264604][T18145] bridge_slave_1: entered promiscuous mode [ 474.372522][T18145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.424723][T18145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.437973][ T9] usb 3-1: USB disconnect, device number 23 [ 474.595538][ T934] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 474.616648][ T5253] Bluetooth: hci7: command tx timeout [ 474.654228][T18145] team0: Port device team_slave_0 added [ 474.667469][T18226] usb usb8: usbfs: process 18226 (syz.5.5637) did not claim interface 0 before use [ 474.667510][T18145] team0: Port device team_slave_1 added [ 474.754210][T18145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.768375][ T934] usb 4-1: Using ep0 maxpacket: 32 [ 474.776309][ T934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.782979][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.787582][ T934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.860726][T18145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.879915][ T934] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 474.893595][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5638'. [ 474.909130][ T934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.913352][T18145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.939876][ T934] usb 4-1: config 0 descriptor?? [ 474.960259][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.034417][T18145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.151699][T18145] hsr_slave_0: entered promiscuous mode [ 475.205095][T18145] hsr_slave_1: entered promiscuous mode [ 475.313156][T18145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.326264][T18145] Cannot create hsr debugfs directory [ 475.410420][ T934] wacom 0003:056A:00E3.001C: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.3-1/input0 [ 475.638755][ T25] usb 4-1: USB disconnect, device number 23 [ 475.660575][T18221] loop0: detected capacity change from 0 to 32768 [ 475.754488][T18221] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 475.821738][ T5254] udevd[5254]: symlink '../../loop0' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:0' failed: Read-only file system [ 475.947535][T18221] XFS (loop0): Ending clean mount [ 475.962249][T18145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.982209][T18145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 476.087750][ T5229] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 476.130396][T18258] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5649'. [ 476.199084][T18145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.219976][T18145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 476.595203][T18145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.595291][T18145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 476.809092][T18145] netdevsim netdevsim4 @ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.863566][ T5253] Bluetooth: hci7: command tx timeout [ 476.869236][T18145] netdevsim netdevsim4 @ (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 477.268117][T18282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5660'. [ 477.513687][T18279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.599741][T18290] openvswitch: netlink: Actions may not be safe on all matching packets [ 477.759315][T18279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.783990][T18292] program syz.5.5664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.924716][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5667'. [ 477.925347][T18279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.016790][T18145] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 478.053013][T18145] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 478.265759][T18304] loop3: detected capacity change from 0 to 4096 [ 478.275057][T18279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.287580][T18304] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 478.355708][T18145] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 478.397516][T18145] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.404614][T18304] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 478.634854][T18279] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.701131][T18279] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.740253][T18145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.807060][T18279] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.835624][T18279] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.910507][T18145] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.049522][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.056683][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.081920][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.089109][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.115604][ T5253] Bluetooth: hci7: command tx timeout [ 479.842527][T18145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.843433][T18145] veth0_vlan: entered promiscuous mode [ 480.855914][T18145] veth1_vlan: entered promiscuous mode [ 480.880704][T18145] veth0_macvtap: entered promiscuous mode [ 480.890112][T18145] veth1_macvtap: entered promiscuous mode [ 480.907496][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.918049][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.928187][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.938946][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.948894][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.959393][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.969294][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.980802][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.991359][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.001879][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.011792][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.022362][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.032332][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.042872][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.054875][T18145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.064834][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.075509][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.085444][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.096734][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.107404][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.117930][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.127753][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.138291][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.148164][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.158659][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.168670][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.179239][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.189140][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.200449][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.212665][T18145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.223295][T18145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.232113][T18145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.240983][T18145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.249785][T18145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.387282][ T5253] Bluetooth: hci7: command tx timeout [ 481.478885][T18393] loop3: detected capacity change from 0 to 256 [ 481.667851][ T3122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.701145][ T3122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.763187][ T2526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.764064][T18399] netlink: 'syz.2.5709': attribute type 1 has an invalid length. [ 481.782424][T18399] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.5709'. [ 481.795524][ T2526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.818289][T18393] FAT-fs (loop3): Directory bread(block 64) failed [ 481.820117][T18399] netlink: 'syz.2.5709': attribute type 1 has an invalid length. [ 481.832923][T18393] FAT-fs (loop3): Directory bread(block 65) failed [ 481.833057][T18393] FAT-fs (loop3): Directory bread(block 66) failed [ 481.893867][T18393] FAT-fs (loop3): Directory bread(block 67) failed [ 481.907643][T18393] FAT-fs (loop3): Directory bread(block 68) failed [ 481.930052][T18393] FAT-fs (loop3): Directory bread(block 69) failed [ 481.947821][T18393] FAT-fs (loop3): Directory bread(block 70) failed [ 481.987130][T18393] FAT-fs (loop3): Directory bread(block 71) failed [ 482.005176][T18393] FAT-fs (loop3): Directory bread(block 72) failed [ 482.044612][T18393] FAT-fs (loop3): Directory bread(block 73) failed [ 482.319888][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 482.570002][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.581807][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.591783][ T25] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 482.600850][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.615478][ T25] usb 3-1: config 0 descriptor?? [ 482.688187][ T5292] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 482.786079][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 482.853319][ T5292] usb 4-1: Using ep0 maxpacket: 16 [ 482.860829][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.873298][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.883210][ T5292] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.904924][ T5292] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 482.914012][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.941101][ T5292] usb 4-1: config 0 descriptor?? [ 482.948222][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 482.968624][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.995737][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.026417][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.052082][ T9] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 483.063892][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.075399][ T25] elecom 0003:056E:010D.001D: item fetching failed at offset 0/3 [ 483.088802][ T9] usb 5-1: config 0 descriptor?? [ 483.104422][ T25] elecom 0003:056E:010D.001D: probe with driver elecom failed with error -22 [ 483.301481][ T5295] usb 3-1: USB disconnect, device number 24 [ 483.418648][ T5292] nti 0003:0757:0A00.001E: item fetching failed at offset 2/5 [ 483.437258][ T5292] nti 0003:0757:0A00.001E: probe with driver nti failed with error -22 [ 483.545502][ T9] sunplus 0003:04FC:05D8.001F: item fetching failed at offset 5/7 [ 483.576206][ T9] sunplus 0003:04FC:05D8.001F: probe with driver sunplus failed with error -22 [ 483.642447][ T9] usb 4-1: USB disconnect, device number 24 [ 483.767668][ T934] usb 5-1: USB disconnect, device number 25 [ 483.945710][ T5295] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 484.109122][ T5295] usb 6-1: Using ep0 maxpacket: 16 [ 484.130151][ T5295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.150856][ T5295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.173138][ T5295] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 484.182996][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.205456][ T5295] usb 6-1: config 0 descriptor?? [ 484.315887][T18455] loop3: detected capacity change from 0 to 64 [ 484.490693][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 484.751113][ T5295] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 484.768098][ T5295] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 484.822651][ T5295] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 484.830815][ T5295] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 484.835171][T18453] loop2: detected capacity change from 0 to 32768 [ 484.860888][T18453] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5735 (18453) [ 484.877328][ T5295] aquacomputer_d5next 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 484.887954][T18453] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 484.903686][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:2' failed: Read-only file system [ 484.921156][T18453] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 484.921264][ T5295] aquacomputer_d5next 0003:0C70:F00D.0020: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.5-1/input0 [ 484.941551][T18453] BTRFS info (device loop2): using free-space-tree [ 484.985124][T18469] netlink: 'syz.3.5740': attribute type 1 has an invalid length. [ 484.993801][T18469] netlink: 9344 bytes leftover after parsing attributes in process `syz.3.5740'. [ 485.032649][T18469] netlink: 'syz.3.5740': attribute type 1 has an invalid length. [ 485.096649][ T5295] usb 6-1: USB disconnect, device number 35 [ 485.602208][ T5507] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 485.734594][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 486.073139][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 486.087387][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.099042][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.113401][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 486.145913][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.175427][ T25] usb 4-1: config 0 descriptor?? [ 486.444066][T18508] random: crng reseeded on system resumption [ 486.935239][ T5292] usb 4-1: USB disconnect, device number 25 [ 486.996116][T18508] Unrecognized hibernate image header format! [ 487.010931][T18508] PM: hibernation: Image mismatch: architecture specific data [ 488.831099][ T25] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 489.026085][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 489.066016][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.099301][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.121002][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 489.135553][ T25] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 489.144639][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.156200][ T25] usb 5-1: config 0 descriptor?? [ 489.437863][ T5292] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 489.572079][T18595] loop3: detected capacity change from 0 to 2048 [ 489.642506][T18596] loop2: detected capacity change from 0 to 4096 [ 489.666585][ T25] hid-multitouch 0003:0457:07DA.0022: unknown main item tag 0x0 [ 489.674370][ T25] hid-multitouch 0003:0457:07DA.0022: unknown main item tag 0x0 [ 489.682081][ T25] hid-multitouch 0003:0457:07DA.0022: unknown main item tag 0x0 [ 489.689877][ T25] hid-multitouch 0003:0457:07DA.0022: unknown main item tag 0x0 [ 489.697559][ T25] hid-multitouch 0003:0457:07DA.0022: unknown main item tag 0x0 [ 489.705271][ T25] hid-multitouch 0003:0457:07DA.0022: unknown main item tag 0x0 [ 489.713015][ T25] hid-multitouch 0003:0457:07DA.0022: unknown main item tag 0x0 [ 489.720704][ T25] hid-multitouch 0003:0457:07DA.0022: unknown main item tag 0x0 [ 489.728382][ T25] hid-multitouch 0003:0457:07DA.0022: unknown main item tag 0x0 [ 489.736231][ T25] hid-multitouch 0003:0457:07DA.0022: unknown main item tag 0x0 [ 489.755867][ T25] hid-multitouch 0003:0457:07DA.0022: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 489.793232][T18596] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 489.825726][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:3' failed: Read-only file system [ 489.915054][T18603] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 489.946657][ T5292] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.966042][ T5292] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 489.986873][ T5292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.998341][ T5292] usb 6-1: config 0 descriptor?? [ 490.049459][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 490.095629][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:2' failed: Read-only file system [ 490.367423][T18608] netlink: 'syz.3.5798': attribute type 10 has an invalid length. [ 490.381230][T18395] usb 5-1: USB disconnect, device number 26 [ 490.505663][T18596] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 490.515599][T18608] team0: Device ipvlan1 failed to register rx_handler [ 490.929832][T18616] loop2: detected capacity change from 0 to 512 [ 490.967936][T18616] EXT4-fs (loop2): 1 truncate cleaned up [ 490.973177][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 490.975005][T18616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.998045][ T5292] ath6kl: Unsupported hardware version: 0x0 [ 491.005530][ T5292] ath6kl: Failed to init ath6kl core: -22 [ 491.011871][ T5292] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 491.117696][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 491.233087][ T934] usb 6-1: USB disconnect, device number 36 [ 491.252396][ T5507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.288690][ T5246] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 491.311337][ T5246] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 491.319562][ T5246] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 491.333589][ T5246] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 491.346966][ T5246] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 491.358028][ T5246] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 491.756310][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 491.862640][T18621] chnl_net:caif_netlink_parms(): no params data found [ 491.877158][T18613] loop3: detected capacity change from 0 to 32768 [ 491.911487][T18613] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5802 (18613) [ 491.962299][ T25] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 491.970758][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.008678][ T25] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 492.037184][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:3' failed: Read-only file system [ 492.052753][ T25] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 492.072886][ T25] usb 3-1: Manufacturer: syz [ 492.079591][ T25] usb 3-1: config 0 descriptor?? [ 492.087005][T18613] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 492.124977][T18613] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 492.189670][ T25] rc_core: IR keymap rc-hauppauge not found [ 492.189698][T18613] BTRFS info (device loop3): using free-space-tree [ 492.195592][ T25] Registered IR keymap rc-empty [ 492.196359][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 492.245749][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.252878][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.261974][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 492.274687][T18621] bridge_slave_0: entered allmulticast mode [ 492.294994][T18621] bridge_slave_0: entered promiscuous mode [ 492.363892][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.367269][T18660] Bluetooth: MGMT ver 1.23 [ 492.384933][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.406603][T18621] bridge_slave_1: entered allmulticast mode [ 492.438976][T18621] bridge_slave_1: entered promiscuous mode [ 492.552827][ C1] igorplugusb 3-1:0.0: receive overflow, at least 33 lost [ 492.629224][T18621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.686495][T18621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.784496][T18395] usb 3-1: USB disconnect, device number 25 [ 492.818437][T18621] team0: Port device team_slave_0 added [ 492.827084][T18621] team0: Port device team_slave_1 added [ 492.866754][ T5231] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 493.306496][T18621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.317372][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.454208][T18621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.519261][T18621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.543021][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.602044][ T5246] Bluetooth: hci8: command tx timeout [ 493.717265][T18621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.804885][T18683] loop3: detected capacity change from 0 to 512 [ 493.811958][T18683] EXT4-fs: Ignoring removed bh option [ 493.926358][T18683] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 494.001478][T18693] loop2: detected capacity change from 0 to 64 [ 494.027331][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 494.053653][T18683] EXT4-fs error (device loop3): __ext4_iget:4952: inode #15: block 1803188595: comm syz.3.5814: invalid block [ 494.093916][T18683] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.5814: couldn't read orphan inode 15 (err -117) [ 494.191190][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 494.195368][T18683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.278285][T18621] hsr_slave_0: entered promiscuous mode [ 494.327441][T18621] hsr_slave_1: entered promiscuous mode [ 494.368370][T18699] netlink: 'syz.4.5827': attribute type 3 has an invalid length. [ 494.389228][T18621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.408856][T18621] Cannot create hsr debugfs directory [ 494.465310][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.215849][T18621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.542408][T18735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5844'. [ 495.649517][T18734] loop2: detected capacity change from 0 to 2048 [ 495.684469][T18621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.700518][T18730] loop3: detected capacity change from 0 to 4096 [ 495.828702][T18730] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 495.845430][ T5246] Bluetooth: hci8: command tx timeout [ 495.880021][ T5556] udevd[5556]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 495.893505][ T5556] udevd[5556]: symlink '../../loop3' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:3' failed: Read-only file system [ 496.079429][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 496.196924][T18621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.252743][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 496.261645][ T25] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 496.271195][ T25] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 496.311701][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 496.352972][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 496.425933][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 496.471142][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.515707][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 496.575220][T18621] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.599289][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 496.669942][ T25] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 496.711989][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.769750][ T25] usb 5-1: config 0 descriptor?? [ 497.046538][T18621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.054648][ T25] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 497.096433][T18621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 497.152908][T18621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 497.163457][ T934] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 497.201136][T18621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.238992][ T5295] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 497.264585][ T5292] usb 5-1: USB disconnect, device number 27 [ 497.274342][ T5292] usblp0: removed [ 497.342382][ T934] usb 2-1: Using ep0 maxpacket: 16 [ 497.364653][ T934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.412763][ T934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.445135][ T5295] usb 4-1: Using ep0 maxpacket: 8 [ 497.450358][ T934] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 497.463983][T18621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.470965][ T934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.479615][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.487795][ T25] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 497.491606][ T5295] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.536564][ T934] usb 2-1: config 0 descriptor?? [ 497.545848][T18621] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.552930][ T5295] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 497.579079][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.586352][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.594175][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.630656][ T5295] usb 4-1: config 0 descriptor?? [ 497.632483][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.642982][ T967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.695991][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 497.703734][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.732627][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.753603][ T25] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 497.774678][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.798259][ T25] usb 3-1: config 0 descriptor?? [ 498.082966][ T934] mcp2200 0003:04D8:00DF.0023: unknown main item tag 0x0 [ 498.111780][ T5246] Bluetooth: hci8: command tx timeout [ 498.125166][ T934] mcp2200 0003:04D8:00DF.0023: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 498.314230][ T5295] usb 4-1: string descriptor 0 read error: -71 [ 498.330315][ T25] waltop 0003:172F:0034.0025: item fetching failed at offset 2/5 [ 498.338680][T18621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.338786][ T25] waltop 0003:172F:0034.0025: probe with driver waltop failed with error -22 [ 498.345668][ T5295] uclogic 0003:5543:006E.0024: failed retrieving string descriptor #200: -71 [ 498.370917][ T46] usb 2-1: USB disconnect, device number 22 [ 498.386950][ T5295] uclogic 0003:5543:006E.0024: failed retrieving pen parameters: -71 [ 498.399276][ T5295] uclogic 0003:5543:006E.0024: failed probing pen v2 parameters: -71 [ 498.407387][ T5295] uclogic 0003:5543:006E.0024: failed probing parameters: -71 [ 498.435306][T18621] veth0_vlan: entered promiscuous mode [ 498.441406][ T5295] uclogic 0003:5543:006E.0024: probe with driver uclogic failed with error -71 [ 498.469898][T18621] veth1_vlan: entered promiscuous mode [ 498.475921][ T5295] usb 4-1: USB disconnect, device number 26 [ 498.656644][T18621] veth0_macvtap: entered promiscuous mode [ 498.668724][ T5335] usb 3-1: USB disconnect, device number 26 [ 499.043473][T18621] veth1_macvtap: entered promiscuous mode [ 499.161184][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.205664][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.246199][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.286100][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.296019][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.340290][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.361179][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.383060][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.405037][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.426576][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.447517][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.469038][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.489926][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.511674][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.532712][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.554299][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.578995][T18621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.889422][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.911111][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.936233][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.972310][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.033864][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.060561][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.081786][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.103704][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.128822][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.147301][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.167314][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.199851][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.220357][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.246750][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.274481][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.307867][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.348186][ T5246] Bluetooth: hci8: command tx timeout [ 500.364758][T18621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.460470][T18621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.480740][T18621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.511447][T18621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.559985][T18621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.857254][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.865405][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.870072][T18825] loop3: detected capacity change from 0 to 512 [ 500.942626][T18825] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.5885: casefold flag without casefold feature [ 500.952795][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.008762][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.033690][ T5556] udevd[5556]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 501.268817][T18825] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.5885: couldn't read orphan inode 15 (err -117) [ 501.356433][T18825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.738870][T18818] loop2: detected capacity change from 0 to 32768 [ 501.771544][T18818] XFS: noikeep mount option is deprecated. [ 501.861690][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.091808][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system [ 502.293124][T18818] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 502.522669][T18818] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 502.872276][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 502.971199][T18818] XFS (loop2): Ending clean mount [ 502.999754][T18867] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 503.144281][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.186443][ T9] usb 2-1: config 0 has no interfaces? [ 503.197996][ T5507] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 503.207287][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.239489][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.286123][ T9] usb 2-1: config 0 descriptor?? [ 503.324147][T18860] loop3: detected capacity change from 0 to 32768 [ 503.381648][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/ca7e2101-b8f1-4838-8e2d-7637b90620e6.tmp-b7:3' failed: Read-only file system [ 503.414267][T18860] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 503.488081][T18869] loop0: detected capacity change from 0 to 4096 [ 503.565422][T18869] NILFS (loop0): invalid segment: Checksum error in segment payload [ 503.573745][T18869] NILFS (loop0): trying rollback from an earlier position [ 503.624004][T18869] NILFS (loop0): recovery complete [ 503.635096][T18860] XFS (loop3): Ending clean mount [ 503.645825][ T934] usb 2-1: USB disconnect, device number 23 [ 503.687676][T18880] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.809204][ T5254] udevd[5254]: symlink '../../loop0' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:0' failed: Read-only file system [ 503.914538][T18884] netlink: 110 bytes leftover after parsing attributes in process `syz.2.5898'. [ 503.979542][ T5231] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 504.573302][ T29] audit: type=1400 audit(1728942011.829:146): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26D6 pid=18896 comm="syz.4.5908" [ 504.961248][T18891] loop2: detected capacity change from 0 to 32768 [ 504.986063][T18907] netlink: 'syz.4.5910': attribute type 16 has an invalid length. [ 505.038781][T18909] netlink: 'syz.1.5911': attribute type 3 has an invalid length. [ 505.101223][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system [ 505.108421][T18910] netlink: 'syz.3.5912': attribute type 29 has an invalid length. [ 505.145090][T18910] netlink: 'syz.3.5912': attribute type 29 has an invalid length. [ 505.657581][T18916] loop3: detected capacity change from 0 to 32768 [ 505.705783][T18922] qrtr: Invalid version 0 [ 505.717366][T18916] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 505.726197][T18916] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 505.755041][T18916] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms [ 505.774215][ T46] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 505.781139][ T46] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 505.940586][ T46] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 147ms [ 505.948620][ T46] gfs2: fsid=syz:syz.0: jid=0: Done [ 505.959227][T18916] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 506.067205][T18936] loop2: detected capacity change from 0 to 64 [ 506.102694][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5925'. [ 506.181055][T18938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5925'. [ 506.207406][T18936] syz.2.5924: attempt to access beyond end of device [ 506.207406][T18936] loop2: rw=0, sector=548, nr_sectors = 2 limit=64 [ 506.269736][T18936] Buffer I/O error on dev loop2, logical block 274, async page read [ 506.326249][T18936] syz.2.5924: attempt to access beyond end of device [ 506.326249][T18936] loop2: rw=0, sector=548, nr_sectors = 2 limit=64 [ 506.384612][T18936] Buffer I/O error on dev loop2, logical block 274, async page read [ 506.396923][ T29] audit: type=1800 audit(1728942013.546:147): pid=18936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5924" name="file3" dev="loop2" ino=6 res=0 errno=0 [ 506.480694][T18947] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5930'. [ 506.544453][T18947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5930'. [ 506.588570][T18947] tipc: Started in network mode [ 506.593489][T18947] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 506.655693][T18947] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 506.665219][T18947] tipc: Enabled bearer , priority 10 [ 506.723019][T18955] sock: sock_timestamping_bind_phc: sock not bind to device [ 506.982759][T18961] loop3: detected capacity change from 0 to 256 [ 507.162647][ T934] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 507.316264][T18974] loop3: detected capacity change from 0 to 64 [ 507.369341][ T934] usb 5-1: too many configurations: 201, using maximum allowed: 8 [ 507.389757][ T934] usb 5-1: config index 0 descriptor too short (expected 64945, got 72) [ 507.415608][ T934] usb 5-1: config index 1 descriptor too short (expected 64945, got 72) [ 507.436880][ T934] usb 5-1: config index 2 descriptor too short (expected 64945, got 72) [ 507.454795][ T934] usb 5-1: config index 3 descriptor too short (expected 64945, got 72) [ 507.477198][ T934] usb 5-1: config index 4 descriptor too short (expected 64945, got 72) [ 507.488177][ T934] usb 5-1: config index 5 descriptor too short (expected 64945, got 72) [ 507.500620][ T934] usb 5-1: config index 6 descriptor too short (expected 64945, got 72) [ 507.520888][ T934] usb 5-1: config index 7 descriptor too short (expected 64945, got 72) [ 507.532700][ T934] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 507.542932][ T934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.559549][ T934] usb 5-1: Product: syz [ 507.617106][ T934] usb 5-1: Manufacturer: syz [ 507.622103][ T5335] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 507.650345][ T934] usb 5-1: SerialNumber: syz [ 507.746363][ T934] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 507.786830][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 507.834691][ T5335] usb 3-1: Using ep0 maxpacket: 8 [ 507.849965][ T5335] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.879476][ T934] tipc: Node number set to 1 [ 507.914075][ T5335] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.926693][ T5335] usb 3-1: config 0 interface 0 has no altsetting 0 [ 507.939585][ T5335] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 507.949104][ T5335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.999507][ T5335] usb 3-1: config 0 descriptor?? [ 508.453323][ T934] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 508.643958][ T934] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 508.653758][ T934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.676417][ T934] usb 2-1: Product: syz [ 508.688091][ T934] usb 2-1: Manufacturer: syz [ 508.710480][ T934] usb 2-1: SerialNumber: syz [ 508.733709][ T934] usb 2-1: config 0 descriptor?? [ 508.774864][ T46] usb 5-1: USB disconnect, device number 28 [ 508.826334][ T5335] usb 3-1: string descriptor 0 read error: -71 [ 508.835009][ T5335] uclogic 0003:5543:0045.0026: failed retrieving string descriptor #200: -71 [ 508.856203][ T5335] uclogic 0003:5543:0045.0026: failed retrieving pen parameters: -71 [ 508.874732][ T5335] uclogic 0003:5543:0045.0026: failed probing pen v2 parameters: -71 [ 508.876560][ T5292] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 508.890659][ T5335] uclogic 0003:5543:0045.0026: failed probing parameters: -71 [ 508.907300][ T5335] uclogic 0003:5543:0045.0026: probe with driver uclogic failed with error -71 [ 508.939936][ T5335] usb 3-1: USB disconnect, device number 27 [ 509.024370][T18981] loop3: detected capacity change from 0 to 32768 [ 509.036651][ T25] usb 2-1: USB disconnect, device number 24 [ 509.082105][T18981] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 509.082686][ T5292] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 509.093904][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system [ 509.116553][ T5292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.141734][ T5292] usb 6-1: config 0 descriptor?? [ 509.288905][T18981] XFS (loop3): Ending clean mount [ 509.300244][T18981] XFS (loop3): Quotacheck needed: Please wait. [ 509.385239][T18981] XFS (loop3): Quotacheck: Done. [ 509.405475][ T5292] kaweth 6-1:0.0: Firmware present in device. [ 509.536046][ T9] usb 5-1: Service connection timeout for: 256 [ 509.542285][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 509.568952][ T9] ath9k_htc: Failed to initialize the device [ 509.587758][ T5231] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 509.612234][ T46] usb 5-1: ath9k_htc: USB layer deinitialized [ 509.622092][ T5292] kaweth 6-1:0.0: Statistics collection: 0 [ 509.661783][ T5292] kaweth 6-1:0.0: Multicast filter limit: 0 [ 509.696019][ T5292] kaweth 6-1:0.0: MTU: 0 [ 509.731651][ T5292] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 509.832181][ T5292] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 509.861478][ T5292] usb 6-1: USB disconnect, device number 37 [ 510.718656][T19037] loop2: detected capacity change from 0 to 1024 [ 510.770810][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 510.804895][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:2' failed: Read-only file system [ 510.810453][T19037] hfsplus: bad catalog entry type [ 511.008226][ T11] hfsplus: b-tree write err: -5, ino 4 [ 511.014137][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 511.258972][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 511.270111][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.290513][ T9] usb 5-1: Product: syz [ 511.294803][ T9] usb 5-1: Manufacturer: syz [ 511.299452][ T9] usb 5-1: SerialNumber: syz [ 511.323880][ T9] usb 5-1: config 0 descriptor?? [ 511.555758][ T934] usb 5-1: USB disconnect, device number 29 [ 512.202971][T19059] loop2: detected capacity change from 0 to 32768 [ 512.247891][T19059] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5978 (19059) [ 512.343123][T19059] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 512.349123][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:2' failed: Read-only file system [ 512.383611][T19059] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 512.434714][T19059] BTRFS info (device loop2): using free-space-tree [ 512.532005][T19096] netlink: 'syz.1.5992': attribute type 1 has an invalid length. [ 512.628367][T19096] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.5992'. [ 512.671997][T19096] netlink: 'syz.1.5992': attribute type 1 has an invalid length. [ 512.698061][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5992'. [ 512.861585][ T5507] BTRFS info (device loop2 state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 512.900183][T19121] loop0: detected capacity change from 0 to 64 [ 513.030812][ T5250] udevd[5250]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 513.227265][T19125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5997'. [ 513.750058][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6006'. [ 513.859473][ T5292] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 513.908797][T19149] loop2: detected capacity change from 0 to 128 [ 514.059729][ T5292] usb 4-1: Using ep0 maxpacket: 16 [ 514.107537][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.132225][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.145837][ T5292] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 514.168588][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.194688][ T5292] usb 4-1: config 0 descriptor?? [ 514.474704][ T46] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 514.545541][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6018'. [ 514.659927][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 514.672536][ T5292] smartjoyplus 0003:6666:8804.0027: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.3-1/input0 [ 514.715297][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.731862][ T5292] smartjoyplus 0003:6666:8804.0027: no output reports found [ 514.740088][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.760774][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 514.795728][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 514.816666][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.874704][ T46] usb 2-1: config 0 descriptor?? [ 514.948910][ T25] usb 4-1: USB disconnect, device number 27 [ 515.369661][ T46] microsoft 0003:045E:07DA.0028: ignoring exceeding usage max [ 515.384727][ T46] microsoft 0003:045E:07DA.0028: No inputs registered, leaving [ 515.394794][ T46] microsoft 0003:045E:07DA.0028: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 515.406266][ T46] microsoft 0003:045E:07DA.0028: no inputs found [ 515.412946][ T46] microsoft 0003:045E:07DA.0028: could not initialize ff, continuing anyway [ 515.766950][ T9] usb 2-1: USB disconnect, device number 25 [ 516.742267][T19217] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6045'. [ 516.752021][T19217] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 516.936164][T19228] loop2: detected capacity change from 0 to 2048 [ 517.014876][T19228] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 517.029854][ T7343] udevd[7343]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system [ 517.100078][ T7343] udevd[7343]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system [ 517.238775][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 517.510977][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.534392][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.544372][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 517.553685][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.618765][ T25] usb 2-1: config 0 descriptor?? [ 517.731249][T19252] loop3: detected capacity change from 0 to 512 [ 517.785116][T19252] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 517.860395][T19252] EXT4-fs (loop3): 1 truncate cleaned up [ 517.868633][T19252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.983411][T19260] netlink: 'syz.4.6061': attribute type 1 has an invalid length. [ 518.004527][T19260] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.6061'. [ 518.014792][T19263] EXT4-fs error (device loop3): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.3.6058: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 518.072801][T19260] netlink: 'syz.4.6061': attribute type 1 has an invalid length. [ 518.082225][T19265] loop2: detected capacity change from 0 to 256 [ 518.112838][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 518.124554][T19263] EXT4-fs (loop3): Remounting filesystem read-only [ 518.311315][ T25] logitech 0003:046D:C294.0029: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 518.323097][ T25] logitech 0003:046D:C294.0029: no inputs found [ 518.428511][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.440855][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6068'. [ 518.559244][ T25] usb 2-1: USB disconnect, device number 26 [ 519.079552][T19282] loop2: detected capacity change from 0 to 4096 [ 519.109551][T19282] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 519.190826][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 519.227332][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-uuid/4C6CE0A9116F2120.tmp-b7:2' failed: Read-only file system [ 519.275489][ T46] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 519.287515][T19282] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 519.450975][ T46] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.459319][ T46] usb 6-1: config 0 has no interface number 0 [ 519.505293][ T46] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.541833][ T46] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.554778][ T46] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=ee.00 [ 519.564287][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.604570][ T46] usb 6-1: config 0 descriptor?? [ 519.677993][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.684445][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.080995][ T46] uclogic 0003:256C:006D.002A: No inputs registered, leaving [ 520.121072][ T5292] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 520.129168][ T46] uclogic 0003:256C:006D.002A: hidraw0: USB HID v0.40 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input1 [ 520.303242][ T46] usb 6-1: USB disconnect, device number 38 [ 520.334259][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.363255][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.397372][ T5292] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 520.417298][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.474000][T19292] loop3: detected capacity change from 0 to 32768 [ 520.481806][ T5292] usb 2-1: config 0 descriptor?? [ 520.518154][T19292] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6076 (19292) [ 520.555653][T19310] loop2: detected capacity change from 0 to 128 [ 520.581277][T19292] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 520.586749][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:3' failed: Read-only file system [ 520.593119][T19310] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 520.640715][T19292] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 520.650315][T19292] BTRFS info (device loop3): using free-space-tree [ 521.076116][ T5292] hid (null): usage index exceeded [ 521.085090][ T5292] lg-g15 0003:046D:C222.002B: ignoring exceeding usage max [ 521.094001][ T5292] lg-g15 0003:046D:C222.002B: ignoring exceeding usage max [ 521.101673][ T5292] lg-g15 0003:046D:C222.002B: usage index exceeded [ 521.108658][ T5292] lg-g15 0003:046D:C222.002B: item 0 0 2 2 parsing failed [ 521.116671][ T5292] lg-g15 0003:046D:C222.002B: probe with driver lg-g15 failed with error -22 [ 521.300263][ T9] usb 2-1: USB disconnect, device number 27 [ 521.355294][ T5556] udevd[5556]: symlink '../../loop3' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:3' failed: Read-only file system [ 521.437856][ T5231] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 522.157932][ T46] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 522.380975][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.425786][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 522.458979][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 522.513703][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 522.556844][ T46] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 522.601495][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.642705][ T46] usb 4-1: config 0 descriptor?? [ 523.140581][ T46] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 523.170776][ T46] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 523.197266][ T46] plantronics 0003:047F:FFFF.002C: unbalanced collection at end of report description [ 523.229309][ T46] plantronics 0003:047F:FFFF.002C: parse failed [ 523.250711][ T46] plantronics 0003:047F:FFFF.002C: probe with driver plantronics failed with error -22 [ 523.378178][ T46] usb 4-1: USB disconnect, device number 28 [ 523.572997][T19376] loop2: detected capacity change from 0 to 32768 [ 523.599812][T19376] XFS: ikeep mount option is deprecated. [ 523.644855][T19378] loop0: detected capacity change from 0 to 32768 [ 523.766325][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:2' failed: Read-only file system [ 523.795126][ T5556] udevd[5556]: symlink '../../loop0' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:0' failed: Read-only file system [ 523.837758][T19376] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 523.859077][T19378] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 523.889188][T19376] XFS (loop2): Ending clean mount [ 523.900318][T19376] XFS (loop2): Quotacheck needed: Please wait. [ 523.942028][T19376] XFS (loop2): Quotacheck: Done. [ 524.062193][T19430] netlink: 'syz.5.6126': attribute type 29 has an invalid length. [ 524.096194][ T5507] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 524.105369][T19378] XFS (loop0): Ending clean mount [ 524.117319][T19430] netlink: 'syz.5.6126': attribute type 29 has an invalid length. [ 524.289799][T19378] XFS (loop0): Quotacheck needed: Please wait. [ 524.367945][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 524.394442][T19378] XFS (loop0): Quotacheck: Done. [ 524.573227][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 524.583718][T18621] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 524.660243][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.726050][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.768312][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 524.815673][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.852341][ T9] usb 2-1: config 0 descriptor?? [ 524.889687][ T9] hub 2-1:0.0: USB hub found [ 525.082541][ T5294] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 525.111356][ T9] hub 2-1:0.0: 1 port detected [ 525.266852][ T5294] usb 6-1: Using ep0 maxpacket: 32 [ 525.329739][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 525.359959][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 525.367758][ T5294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.418376][ T5294] usb 6-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 525.450598][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 525.460424][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 525.470172][ T5294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.506548][ T5294] usb 6-1: config 0 descriptor?? [ 525.533982][ T9] usb 2-1: USB disconnect, device number 28 [ 525.830102][ T46] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 526.025556][ T5294] wacom 0003:056A:032C.002D: unbalanced collection at end of report description [ 526.076038][ T5294] wacom 0003:056A:032C.002D: parse failed [ 526.099133][ T5294] wacom 0003:056A:032C.002D: probe with driver wacom failed with error -22 [ 526.102195][ T46] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 526.163750][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.206038][ T46] usb 4-1: config 0 has no interface number 0 [ 526.231142][ T46] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 526.253695][ T5292] usb 6-1: USB disconnect, device number 39 [ 526.305066][ T46] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.374570][ T46] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 526.396708][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.411286][ T46] usb 4-1: Product: syz [ 526.429948][ T46] usb 4-1: Manufacturer: syz [ 526.434596][ T46] usb 4-1: SerialNumber: syz [ 526.503410][ T46] usb 4-1: config 0 descriptor?? [ 526.924118][T19486] loop2: detected capacity change from 0 to 128 [ 526.978763][T19486] hpfs: bad mount options. [ 527.226592][ T46] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 527.341837][ T46] usb 4-1: USB disconnect, device number 29 [ 527.470250][T19498] loop2: detected capacity change from 0 to 2048 [ 527.600148][T19498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.661147][T19498] ext4 filesystem being mounted at /1032/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 527.789345][T19511] program syz.5.6162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.795019][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 527.834374][T19513] loop0: detected capacity change from 0 to 512 [ 527.864001][ T5507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.885497][T19513] EXT4-fs error (device loop0): __ext4_iget:4952: inode #11: block 16: comm syz.0.6165: invalid block [ 527.890592][ T5250] udevd[5250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 527.897264][T19513] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.6165: couldn't read orphan inode 11 (err -117) [ 527.973123][T19513] EXT4-fs (loop0): 1 truncate cleaned up [ 527.984741][T19513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.163937][T19513] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.6165: bg 0: block 16: invalid block bitmap [ 528.307309][T18621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.384297][T19526] loop3: detected capacity change from 0 to 4096 [ 528.446712][T19526] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 528.513800][ T5556] udevd[5556]: symlink '../../loop3' '/dev/disk/by-label/쨙ಘ긓kaller.tmp-b7:3' failed: Read-only file system [ 528.544575][ T5556] udevd[5556]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system [ 528.648883][T19526] ntfs3(loop3): ino=5, "/" attr_set_size [ 528.654613][T19526] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 529.304337][T19551] loop3: detected capacity change from 0 to 4096 [ 529.345716][T19551] NILFS (loop3): invalid segment: Checksum error in segment payload [ 529.365908][T19551] NILFS (loop3): trying rollback from an earlier position [ 529.371766][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:3' failed: Read-only file system [ 529.420123][T19551] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 529.474123][T19534] loop2: detected capacity change from 0 to 32768 [ 529.564077][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system [ 529.580621][ T934] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 530.214939][ T934] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 530.224250][ T934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.232386][ T934] usb 5-1: Product: syz [ 530.238241][ T934] usb 5-1: Manufacturer: syz [ 530.242951][ T934] usb 5-1: SerialNumber: syz [ 530.267526][ T934] usb 5-1: config 0 descriptor?? [ 530.290624][ T934] ch341 5-1:0.0: ch341-uart converter detected [ 530.469219][ T29] audit: type=1326 audit(1728942035.772:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.2.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5337dff9 code=0x7ffc0000 [ 530.502697][T19575] loop2: detected capacity change from 0 to 256 [ 530.522321][T19575] exfat: Bad value for 'uid' [ 530.538177][T19575] exfat: Bad value for 'uid' [ 530.542952][ T29] audit: type=1326 audit(1728942035.790:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.2.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fde5337dff9 code=0x7ffc0000 [ 530.638905][ T29] audit: type=1326 audit(1728942035.790:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.2.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde5337e033 code=0x7ffc0000 [ 530.681428][ T29] audit: type=1326 audit(1728942035.790:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.2.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fde5337cadf code=0x7ffc0000 [ 530.726005][ T29] audit: type=1326 audit(1728942035.799:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.2.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fde5337e087 code=0x7ffc0000 [ 530.782597][ T5293] usb 6-1: [UEAGLE-ATM] firmware is not available [ 530.787257][ T29] audit: type=1326 audit(1728942035.799:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.2.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde5337c990 code=0x7ffc0000 [ 530.863564][ T29] audit: type=1326 audit(1728942035.799:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.2.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde5337dbfb code=0x7ffc0000 [ 530.940931][ T29] audit: type=1326 audit(1728942035.799:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.2.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fde5337cc8a code=0x7ffc0000 [ 530.975682][ T934] usb 5-1: failed to send control message: -71 [ 530.982137][ T934] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 530.994651][ T934] usb 5-1: USB disconnect, device number 30 [ 531.010069][ T934] ch341 5-1:0.0: device disconnected [ 531.027440][ T29] audit: type=1326 audit(1728942035.799:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.2.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fde5337cc8a code=0x7ffc0000 [ 531.054536][T19579] loop2: detected capacity change from 0 to 256 [ 531.084954][ T29] audit: type=1326 audit(1728942035.809:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19574 comm="syz.2.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fde5337c897 code=0x7ffc0000 [ 531.171441][T19579] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 531.278447][T19571] loop3: detected capacity change from 0 to 32768 [ 531.289444][T19571] XFS: ikeep mount option is deprecated. [ 531.312195][T19571] XFS: noikeep mount option is deprecated. [ 531.375290][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:3' failed: Read-only file system [ 531.378548][T19571] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 531.498907][T19571] XFS (loop3): Ending clean mount [ 531.508871][T19571] XFS (loop3): Quotacheck needed: Please wait. [ 531.628757][T19571] XFS (loop3): Quotacheck: Done. [ 531.782396][ T5231] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 531.804328][T19597] loop2: detected capacity change from 0 to 256 [ 531.855704][T19597] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 532.293417][T19611] loop2: detected capacity change from 0 to 2048 [ 532.518792][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system [ 532.545285][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system [ 532.589646][T19611] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 532.618928][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system [ 532.689870][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system [ 533.273161][ T5293] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 533.438230][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.472485][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.501771][ T5293] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 533.529207][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.551677][ T5293] usb 2-1: config 0 descriptor?? [ 534.104708][T19657] loop0: detected capacity change from 0 to 1764 [ 534.134621][ T5293] wacom 0003:056A:032C.002E: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.1-1/input0 [ 534.319861][ T5294] usb 2-1: USB disconnect, device number 29 [ 534.869312][T19676] openvswitch: netlink: Actions may not be safe on all matching packets [ 535.132979][T19684] loop0: detected capacity change from 0 to 8 [ 535.179957][T19684] squashfs image failed sanity check [ 535.235979][T19684] loop0: detected capacity change from 0 to 8 [ 535.313644][T19684] hpfs: hpfs_map_sector(): read error [ 535.456149][T19663] loop2: detected capacity change from 0 to 32768 [ 535.482050][T19663] non-latin1 character 0x466c found in JFS file name [ 535.492224][T19663] mount with iocharset=utf8 to access [ 535.582799][ T934] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 535.622609][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system [ 535.804275][ T934] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 535.841015][ T934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.849070][ T934] usb 2-1: Product: syz [ 535.877897][ T934] usb 2-1: Manufacturer: syz [ 535.882545][ T934] usb 2-1: SerialNumber: syz [ 535.899855][ T934] usb 2-1: config 0 descriptor?? [ 535.919427][ T934] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 536.135992][T19708] loop2: detected capacity change from 0 to 128 [ 536.145374][T19708] affs: Error parsing options [ 536.373160][T19714] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6252'. [ 536.514262][T19718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6256'. [ 536.515664][ T934] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42 [ 536.647321][T19720] loop2: detected capacity change from 0 to 1024 [ 536.755912][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 536.817319][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:2' failed: Read-only file system [ 536.918955][ T934] usb 2-1: USB disconnect, device number 30 [ 537.760099][T19745] loop2: detected capacity change from 0 to 1024 [ 537.784954][T19749] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 537.837850][T19745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.863390][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 537.878560][T19745] ext4 filesystem being mounted at /1057/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.175667][ T5507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.409245][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6279'. [ 538.441035][ T934] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 538.628152][ T934] usb 2-1: Using ep0 maxpacket: 16 [ 538.656212][ T934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.690290][ T934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.731590][ T934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 538.755366][ T934] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 538.764501][ T934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.806991][ T934] usb 2-1: config 0 descriptor?? [ 538.842074][ T5294] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 539.028627][ T5294] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.069482][ T5294] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 539.130932][ T5294] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58 [ 539.188126][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.227182][ T5294] usb 4-1: config 0 descriptor?? [ 539.378498][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.410667][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.432731][T19789] loop2: detected capacity change from 0 to 1024 [ 539.449876][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.479042][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.525015][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.564030][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 539.570045][ T5294] usb 4-1: USB disconnect, device number 30 [ 539.582882][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.586820][T19789] hfsplus: bad catalog entry type [ 539.612148][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.626692][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.634135][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.635081][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:2' failed: Read-only file system [ 539.641349][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.641385][ T934] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 539.694673][ T934] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002F/input/input43 [ 539.731551][ T1901] hfsplus: b-tree write err: -5, ino 4 [ 539.751656][ T934] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 539.813284][ T934] usb 2-1: USB disconnect, device number 31 [ 540.355098][T19809] loop2: detected capacity change from 0 to 512 [ 540.426934][T19809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.467304][T19809] ext4 filesystem being mounted at /1065/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.482936][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 540.636338][T19824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6302'. [ 540.637336][ T5507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.504863][T19852] netlink: 'syz.3.6316': attribute type 1 has an invalid length. [ 541.544544][T19852] netlink: 9384 bytes leftover after parsing attributes in process `syz.3.6316'. [ 541.851152][T19840] loop2: detected capacity change from 0 to 32768 [ 541.887523][T19840] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 541.895750][T19840] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 541.914413][T19840] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 541.926122][ T5292] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 541.933686][ T5292] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 542.042683][ T5292] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms [ 542.050482][ T5292] gfs2: fsid=syz:syz.0: jid=0: Done [ 542.060380][T19840] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 542.114464][T19869] sp0: Synchronizing with TNC [ 542.122546][T19868] [U] è` [ 542.190688][T19871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6322'. [ 542.203561][T19871] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 542.428957][T19876] tipc: Enabling of bearer rejected, already enabled [ 542.493905][T19878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6323'. [ 542.984287][T19900] hugetlbfs: Bad value for 'uid' [ 542.989323][T19900] hugetlbfs: Bad value for 'uid' [ 543.562788][ T9] IPVS: starting estimator thread 0... [ 543.610084][T19928] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6344'. [ 543.696379][T19933] IPVS: using max 18 ests per chain, 43200 per kthread [ 543.728176][ T934] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 543.752438][T19940] binder: 19939:19940 ioctl c0306201 20000580 returned -22 [ 543.903394][ T934] usb 3-1: Using ep0 maxpacket: 16 [ 543.916070][ T934] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 543.930877][ T934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.949959][ T934] usb 3-1: Product: syz [ 543.954193][ T934] usb 3-1: Manufacturer: syz [ 543.966625][ T934] usb 3-1: SerialNumber: syz [ 543.981472][ T5246] Bluetooth: hci7: Dropping invalid advertising data [ 543.992531][ T5246] Bluetooth: hci7: Malformed LE Event: 0x02 [ 543.997243][ T934] usb 3-1: config 0 descriptor?? [ 544.041012][ T934] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 544.393913][T19934] loop3: detected capacity change from 0 to 32768 [ 544.959152][T19942] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 544.970472][T19942] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 544.998203][T19942] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 545.004214][T19942] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 545.012715][T19942] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 545.018804][T19942] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 545.026188][T19942] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 545.032364][T19942] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 545.041898][T19942] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 545.047953][T19942] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 545.059866][T19942] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 545.066068][T19942] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 545.074200][T19942] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 545.081082][T19942] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 545.090774][T19942] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 545.099044][T19942] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 545.107058][T19942] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 545.114415][T19942] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 545.193736][T19934] (syz.3.6343,19934,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 545.243402][ T934] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 545.245801][T19934] (syz.3.6343,19934,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 545.393037][T19934] JBD2: Ignoring recovery information on journal [ 545.422551][ T9] usb 3-1: USB disconnect, device number 28 [ 545.435227][ T9] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 545.460173][ T9] visor 3-1:0.0: device disconnected [ 545.525562][T19934] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 545.539486][ T934] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 545.679666][ T5231] ocfs2: Unmounting device (7,3) on (node local) [ 545.721869][ T934] usb 5-1: Using ep0 maxpacket: 32 [ 545.737889][ T934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.756202][ T934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.780234][ T934] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 545.808492][ T934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.841609][T19980] loop3: detected capacity change from 0 to 512 [ 545.853183][ T934] usb 5-1: config 0 descriptor?? [ 545.866001][ T934] hub 5-1:0.0: USB hub found [ 545.944542][T19980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.018767][T19980] ext4 filesystem being mounted at /1110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.100819][ T934] hub 5-1:0.0: 1 port detected [ 546.224061][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.315387][ T934] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 546.342764][ T934] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 546.358989][T19991] loop2: detected capacity change from 0 to 128 [ 546.370684][ T934] usbhid 5-1:0.0: can't add hid device: -71 [ 546.383232][ T5253] Bluetooth: hci0: command 0x0406 tx timeout [ 546.421505][T19991] FAT-fs (loop2): error, invalid access to FAT (entry 0x0f000000) [ 546.424562][ T934] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 546.467924][T19991] FAT-fs (loop2): Filesystem has been set read-only [ 546.483991][ T934] usb 5-1: USB disconnect, device number 31 [ 546.504154][T19991] FAT-fs (loop2): error, invalid access to FAT (entry 0x0f000000) [ 546.978226][T20009] loop3: detected capacity change from 0 to 64 [ 547.035736][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/unt.tmp-b7:3' failed: Read-only file system [ 547.146890][T20007] loop2: detected capacity change from 0 to 4096 [ 547.181064][T20007] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 547.247731][ T5253] Bluetooth: hci4: command 0x0406 tx timeout [ 547.254388][ T5253] Bluetooth: hci3: command 0x0406 tx timeout [ 547.262605][ T5253] Bluetooth: hci1: command 0x0406 tx timeout [ 547.268657][ T5253] Bluetooth: hci2: command 0x0406 tx timeout [ 547.293406][T20007] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 547.305484][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 547.336365][T20015] Bluetooth: hci8: command 0x0c1a tx timeout [ 547.336828][ T5246] Bluetooth: hci7: command 0x0c1a tx timeout [ 547.342632][T20015] Bluetooth: hci6: command 0x0406 tx timeout [ 547.358949][T20007] ntfs3(loop2): Failed to load $Extend (-22). [ 547.391739][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:2' failed: Read-only file system [ 547.404052][T20007] ntfs3(loop2): Failed to initialize $Extend. [ 548.008406][T20040] loop0: detected capacity change from 0 to 512 [ 548.032648][T20040] EXT4-fs (loop0): orphan cleanup on readonly fs [ 548.057494][T20040] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 548.256974][T20040] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 548.295080][T20040] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.6386: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 548.324566][T20030] loop3: detected capacity change from 0 to 32768 [ 548.376146][T20040] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.6386: couldn't read orphan inode 13 (err -117) [ 548.485190][ T5292] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 548.545835][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system [ 548.560733][T20040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 548.605319][T20030] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 548.625334][T20019] Bluetooth: hci0: command 0x0406 tx timeout [ 548.668616][ T5292] usb 3-1: Using ep0 maxpacket: 16 [ 548.675497][ T5292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.687067][ T5292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.697155][ T5292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.711846][ T5292] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 548.720911][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.807397][ T5292] usb 3-1: config 0 descriptor?? [ 548.895423][T18621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.938663][T20051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6391'. [ 549.079075][ T5231] ocfs2: Unmounting device (7,3) on (node local) [ 549.310604][T20064] loop3: detected capacity change from 0 to 1024 [ 549.354515][T20061] loop0: detected capacity change from 0 to 4096 [ 549.388694][ T5292] kye 0003:0458:0087.0030: unknown main item tag 0x0 [ 549.403266][ T5292] kye 0003:0458:0087.0030: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0 [ 549.420548][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 549.461266][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 549.495428][T20019] Bluetooth: hci2: command 0x0406 tx timeout [ 549.528476][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 549.530414][ T5556] udevd[5556]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 549.542403][T20064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.554032][ T5253] Bluetooth: hci1: command 0x0406 tx timeout [ 549.571351][ T5253] Bluetooth: hci3: command 0x0406 tx timeout [ 549.572464][ T5556] udevd[5556]: symlink '../../loop0' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:0' failed: Read-only file system [ 549.577352][ T5253] Bluetooth: hci4: command 0x0406 tx timeout [ 549.614063][T20015] Bluetooth: hci6: command 0x0406 tx timeout [ 549.620129][T20015] Bluetooth: hci7: command 0x0c1a tx timeout [ 549.626463][T20015] Bluetooth: hci8: command 0x0c1a tx timeout [ 549.651694][ T5293] usb 3-1: USB disconnect, device number 29 [ 549.801078][T20061] ntfs3(loop0): failed to convert "0080" to macgaelic [ 549.816151][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 549.822579][T20061] ntfs3(loop0): failed to convert name for inode 1e. [ 549.859843][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.261430][ T5294] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 550.440366][ T5294] usb 5-1: Using ep0 maxpacket: 16 [ 550.446245][T20091] loop3: detected capacity change from 0 to 512 [ 550.453223][T20091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 550.458195][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.500789][T20091] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 550.509906][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.509939][ T5294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 550.509991][ T5294] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 550.603621][T20091] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 550.645834][T20091] System zones: 0-2, 18-18, 34-34 [ 550.680985][T20091] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 550.724789][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.771504][ T5294] usb 5-1: config 0 descriptor?? [ 550.777658][T20091] EXT4-fs (loop3): 1 truncate cleaned up [ 550.785595][T20091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.976895][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.127787][T20080] loop0: detected capacity change from 0 to 32768 [ 551.186413][T20080] XFS (loop0): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 551.234736][ T5294] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0031/input/input44 [ 551.280622][T20080] XFS (loop0): Ending clean mount [ 551.350217][ T5294] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 551.409168][T18621] XFS (loop0): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 551.476944][ T5294] usb 5-1: USB disconnect, device number 32 [ 551.843228][T20019] Bluetooth: hci8: command 0x0c1a tx timeout [ 551.843245][T20015] Bluetooth: hci7: command 0x0c1a tx timeout [ 552.049076][ T5292] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 552.081183][T20101] loop2: detected capacity change from 0 to 32768 [ 552.278383][T20121] loop0: detected capacity change from 0 to 32768 [ 552.432433][T20121] JBD2: Ignoring recovery information on journal [ 552.469842][ T5250] udevd[5250]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 552.560050][T20101] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 552.761604][T20139] usb usb5: usbfs: process 20139 (syz.1.6422) did not claim interface 0 before use [ 552.785627][T20121] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 552.829158][T20101] XFS (loop2): Ending clean mount [ 552.848078][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.859088][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.869719][ T5292] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.883450][ T5292] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 552.892514][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.914855][ T5292] usb 4-1: config 0 descriptor?? [ 553.069959][T18621] ocfs2: Unmounting device (7,0) on (node local) [ 553.257803][ T5507] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 553.362427][ T5292] hid-alps 0003:044E:120B.0032: item fetching failed at offset 2/5 [ 553.371607][ T5292] hid-alps 0003:044E:120B.0032: parse failed [ 553.377728][ T5292] hid-alps 0003:044E:120B.0032: probe with driver hid-alps failed with error -22 [ 553.595065][ T5294] usb 4-1: USB disconnect, device number 31 [ 554.116508][T20165] loop2: detected capacity change from 0 to 4096 [ 554.191468][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 554.234238][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:2' failed: Read-only file system [ 554.274340][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 554.274364][ T29] audit: type=1800 audit(1728942057.739:166): pid=20165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6436" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 554.313438][ T5294] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 554.378244][ T5292] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 554.518055][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.562108][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.573214][ T5292] usb 5-1: Using ep0 maxpacket: 8 [ 554.590615][ T5292] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 554.594125][ T5294] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 554.605661][ T5292] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 554.638422][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.677550][ T5292] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.682440][ T5294] usb 2-1: config 0 descriptor?? [ 554.729209][ T5292] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.762106][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.800680][ T5292] usb 5-1: Product: syz [ 554.804885][ T5292] usb 5-1: Manufacturer: syz [ 554.809494][ T5292] usb 5-1: SerialNumber: syz [ 555.181700][ T5294] gembird 0003:11FF:3331.0033: unknown main item tag 0x0 [ 555.208626][T20195] loop2: detected capacity change from 0 to 2048 [ 555.216143][ T5294] gembird 0003:11FF:3331.0033: unknown main item tag 0x0 [ 555.224128][ T5294] gembird 0003:11FF:3331.0033: unknown main item tag 0x0 [ 555.242432][ T5294] gembird 0003:11FF:3331.0033: unknown main item tag 0x0 [ 555.264485][ T5294] gembird 0003:11FF:3331.0033: unknown main item tag 0x0 [ 555.284683][ T5294] gembird 0003:11FF:3331.0033: unknown main item tag 0x0 [ 555.319656][T20195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.322565][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 555.345657][ T5294] gembird 0003:11FF:3331.0033: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.1-1/input0 [ 555.513446][ T5507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.534111][ T25] usb 2-1: USB disconnect, device number 32 [ 555.563805][ T5292] usb 5-1: 0:2 : does not exist [ 555.616046][ T5292] usb 5-1: USB disconnect, device number 33 [ 555.734914][ T5254] udevd[5254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.098136][T20191] loop0: detected capacity change from 0 to 32768 [ 556.114954][T20210] UBIFS error (pid: 20210): cannot open "./file0", error -22 [ 556.128199][T20191] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6444 (20191) [ 556.205863][T20191] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 556.234461][T20191] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 556.243999][T20191] BTRFS info (device loop0): using free-space-tree [ 556.449435][ T5250] udevd[5250]: symlink '../../loop0' '/dev/disk/by-uuid/34a2da50-e117-4d40-8878-8e0fb0127b5f.tmp-b7:0' failed: Read-only file system [ 556.637050][ T25] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 556.745118][T20212] loop2: detected capacity change from 0 to 32768 [ 556.797384][ T5556] udevd[5556]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system [ 556.825048][ T25] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 556.837653][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.856248][T18621] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 556.869020][ T25] usb 5-1: Product: syz [ 556.875116][ T25] usb 5-1: Manufacturer: syz [ 556.879988][T20212] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 556.892056][ T25] usb 5-1: SerialNumber: syz [ 556.913101][ T25] usb 5-1: config 0 descriptor?? [ 557.155215][ T25] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 557.186245][T20212] XFS (loop2): Ending clean mount [ 557.232660][T20212] XFS (loop2): Quotacheck needed: Please wait. [ 557.372971][ T25] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 557.394188][ T25] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 557.419170][T20212] XFS (loop2): Quotacheck: Done. [ 557.426234][ T25] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 557.535381][ T5507] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 557.562059][ T25] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 557.602204][ T25] usb 5-1: USB disconnect, device number 34 [ 558.269097][T20274] loop2: detected capacity change from 0 to 1764 [ 559.039320][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6485'. [ 559.068027][T20303] nbd: socks must be embedded in a SOCK_ITEM attr [ 559.541608][T20271] loop0: detected capacity change from 0 to 32768 [ 559.608541][T20271] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 559.704523][ T5250] udevd[5250]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 559.770629][T20271] syz.0.6472 (20271) used greatest stack depth: 17240 bytes left [ 559.836388][T18621] ocfs2: Unmounting device (7,0) on (node local) [ 559.936882][T20327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6498'. [ 559.970378][T20327] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6498'. [ 560.009936][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6498'. [ 560.249894][T20298] loop3: detected capacity change from 0 to 32768 [ 560.342550][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/9f1cad42-11bd-4e12-8f0b-f07876b81d9a.tmp-b7:3' failed: Read-only file system [ 560.390398][T20298] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 560.658841][T20298] XFS (loop3): Ending clean mount [ 560.760651][ T5231] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 561.233839][T20361] pimreg3: entered allmulticast mode [ 562.966672][T20395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6524'. [ 563.471252][T20019] Bluetooth: hci8: command 0x0c1a tx timeout [ 563.579335][T20376] loop2: detected capacity change from 0 to 32768 [ 563.779505][T20376] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 563.825305][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system [ 564.259484][ T5507] ocfs2: Unmounting device (7,2) on (node local) [ 565.013734][T20390] loop3: detected capacity change from 0 to 32768 [ 565.131416][T20390] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 565.186675][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system [ 565.213940][ T5335] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 565.419725][ T5231] ocfs2: Unmounting device (7,3) on (node local) [ 565.429216][ T5335] usb 5-1: Using ep0 maxpacket: 16 [ 565.492340][ T5335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.607506][ T5335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.671209][ T5335] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 565.738413][ T5335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.813641][ T5335] usb 5-1: config 0 descriptor?? [ 566.344584][ T5335] aquacomputer_d5next 0003:0C70:F0B6.0034: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 566.371128][T20432] tipc: Started in network mode [ 566.443270][T20432] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 566.583143][ T5335] usb 5-1: USB disconnect, device number 35 [ 566.705737][T20432] tipc: Enabled bearer , priority 10 [ 567.317116][T20421] loop0: detected capacity change from 0 to 32768 [ 567.390834][T20421] XFS: noikeep mount option is deprecated. [ 567.500962][ T5250] udevd[5250]: symlink '../../loop0' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:0' failed: Read-only file system [ 567.599642][T20421] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 567.808540][T20421] XFS (loop0): Ending clean mount [ 567.848386][T20421] XFS (loop0): Quotacheck needed: Please wait. [ 567.905635][ T5294] tipc: Node number set to 4269801488 [ 568.094493][T20421] XFS (loop0): Quotacheck: Done. [ 568.286286][T20430] loop2: detected capacity change from 0 to 32768 [ 568.322084][T18621] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 568.407161][T20430] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 568.525370][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/9f1cad42-11bd-4e12-8f0b-f07876b81d9a.tmp-b7:2' failed: Read-only file system [ 568.645177][T20430] XFS (loop2): Ending clean mount [ 569.016184][ T5507] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 569.027663][T20436] loop3: detected capacity change from 0 to 32768 [ 569.067908][T20436] XFS: attr2 mount option is deprecated. [ 569.158465][T20436] XFS: ikeep mount option is deprecated. [ 569.190710][T20436] XFS: noikeep mount option is deprecated. [ 569.235620][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:3' failed: Read-only file system [ 569.414216][T20436] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 569.667550][T20436] XFS (loop3): Ending clean mount [ 569.691807][T20436] XFS (loop3): Quotacheck needed: Please wait. [ 569.871259][T20436] XFS (loop3): Quotacheck: Done. [ 570.093302][ T5231] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 570.250533][ T5335] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 570.291230][ T5250] udevd[5250]: symlink '../../loop0' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:3' failed: Read-only file system [ 570.532329][ T5335] usb 2-1: Using ep0 maxpacket: 8 [ 570.622782][T20484] vhci_hcd: vhci_device speed not set [ 570.643099][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.727381][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.792156][ T5335] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 570.867066][ T5335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.944806][ T5335] usb 2-1: config 0 descriptor?? [ 571.276205][T20019] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 571.752073][ T5335] wacom 0003:056A:003F.0035: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.1-1/input0 [ 572.024027][ T5335] usb 2-1: USB disconnect, device number 33 [ 572.322733][ T29] audit: type=1326 audit(1728942074.399:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20497 comm="syz.3.6560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0dbd7dff9 code=0x0 [ 573.639941][T20502] loop3: detected capacity change from 0 to 512 [ 573.800354][T20502] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6562: invalid indirect mapped block 256 (level 2) [ 573.859108][ T5250] udevd[5250]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 573.948979][T20508] nbd: must specify an index to disconnect [ 573.966998][T20502] EXT4-fs (loop3): Remounting filesystem read-only [ 574.000086][T20502] EXT4-fs (loop3): 2 truncates cleaned up [ 574.054147][T20502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.816638][T15724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.951487][T20520] openvswitch: netlink: Actions may not be safe on all matching packets [ 575.382233][T20525] netlink: 'syz.2.6571': attribute type 1 has an invalid length. [ 575.839462][T20535] loop0: detected capacity change from 0 to 128 [ 576.514090][T20535] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 576.578605][ T5250] udevd[5250]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 576.626121][T20535] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 577.156245][T18621] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 577.773213][T20557] loop0: detected capacity change from 0 to 4096 [ 577.840174][T20557] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 577.943983][T20557] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 577.989677][ T5250] udevd[5250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 578.003712][T20557] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 578.103940][ T5250] udevd[5250]: symlink '../../loop0' '/dev/disk/by-uuid/02AFA4DB32BB7E65.tmp-b7:0' failed: Read-only file system [ 578.491662][ T5335] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 578.712031][ T5335] usb 2-1: Using ep0 maxpacket: 32 [ 578.786402][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.909186][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.968643][ T5335] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 579.046833][ T5335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.144875][ T5335] usb 2-1: config 0 descriptor?? [ 579.343019][T20581] loop2: detected capacity change from 0 to 2048 [ 579.449005][T20583] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 579.572832][ T5250] udevd[5250]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system [ 579.694264][T20584] loop0: detected capacity change from 0 to 2048 [ 579.875283][T20584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 579.950454][ T5335] wacom 0003:056A:00DE.0036: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 580.069689][ T5335] wacom 0003:056A:00DE.0036: hidraw0: USB HID v0.00 Device [HID 056a:00de] on usb-dummy_hcd.1-1/input0 [ 580.179267][T20584] UDF-fs: error (device loop0): udf_rename: failed to find renamed entry again in directory (ino 1376) [ 580.235254][ T5556] udevd[5556]: symlink '../../loop0' '/dev/disk/by-label/LinuxUDF.tmp-b7:0' failed: Read-only file system [ 580.278653][ T5335] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00DE.0036/input/input49 [ 580.398483][ T5556] udevd[5556]: symlink '../../loop0' '/dev/disk/by-uuid/1234567812345678.tmp-b7:0' failed: Read-only file system [ 580.561153][ T5335] usb 2-1: USB disconnect, device number 34 [ 581.179100][T20595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6602'. [ 582.214982][T20015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 582.229150][T20015] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 582.238386][T20015] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 582.246754][T20015] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 582.256114][T20015] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 582.263713][T20015] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 584.508694][T20015] Bluetooth: hci3: command tx timeout [ 585.202348][T20635] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 585.209398][T20635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.297618][T20639] omfs: Invalid superblock (0) [ 585.421442][T20635] vhci_hcd vhci_hcd.0: Device attached [ 585.656808][ T9] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 586.339703][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 586.346147][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 586.349938][ C1] sched: DL replenish lagged too much [ 586.762254][T20015] Bluetooth: hci3: command tx timeout [ 588.405357][T20636] vhci_hcd: connection reset by peer [ 588.434893][ T1901] vhci_hcd: stop threads [ 588.456429][ T1901] vhci_hcd: release socket [ 588.486335][ T1901] vhci_hcd: disconnect device [ 588.527847][ T9] usb 11-1: device descriptor read/64, error -71 [ 588.742981][ T9] vhci_hcd: vhci_device speed not set [ 589.015959][T20015] Bluetooth: hci3: command tx timeout [ 589.220458][ T29] audit: type=1326 audit(1728942089.989:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e957dff9 code=0x7ffc0000 [ 589.287640][ T29] audit: type=1326 audit(1728942090.016:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f96e957dff9 code=0x7ffc0000 [ 589.359556][ T29] audit: type=1326 audit(1728942090.016:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e957dff9 code=0x7ffc0000 [ 589.437976][ T29] audit: type=1326 audit(1728942090.016:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e957dff9 code=0x7ffc0000 [ 589.508389][ T29] audit: type=1326 audit(1728942090.016:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f96e957dff9 code=0x7ffc0000 [ 589.583297][T20665] delete_channel: no stack [ 589.587913][ T29] audit: type=1326 audit(1728942090.016:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e957dff9 code=0x7ffc0000 [ 589.663916][ T29] audit: type=1326 audit(1728942090.016:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20662 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e957dff9 code=0x7ffc0000 [ 591.271212][T20015] Bluetooth: hci3: command tx timeout [ 593.437154][T20019] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 593.450427][T20019] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 593.459101][T20019] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 593.467067][T20019] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 593.477275][T20019] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 593.485260][T20019] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 595.046770][T20015] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 595.057253][T20015] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 595.066045][T20015] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 595.077372][T20015] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 595.085286][T20015] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 595.093829][T20015] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 595.695351][T20019] Bluetooth: hci9: command tx timeout [ 597.339711][T20019] Bluetooth: hci10: command tx timeout [ 597.943373][T20019] Bluetooth: hci9: command tx timeout [ 598.059933][T20015] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 598.070812][T20015] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 598.079967][T20015] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 598.089849][T20015] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 598.101855][T20015] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 598.110504][T20015] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 599.515960][T20019] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 599.531068][T20019] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 599.539099][T20019] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 599.549546][T20019] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 599.557852][T20019] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 599.565212][T20019] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 599.610986][T20019] Bluetooth: hci10: command tx timeout [ 600.202547][T20019] Bluetooth: hci9: command tx timeout [ 600.370084][T20019] Bluetooth: hci11: command tx timeout [ 601.843328][T20019] Bluetooth: hci10: command tx timeout [ 601.848899][T20019] Bluetooth: hci12: command tx timeout [ 601.981899][ T5253] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 601.992989][ T5253] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 602.002472][ T5253] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 602.013469][ T5253] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 602.024298][ T5253] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 602.032741][ T5253] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 602.455250][ T5253] Bluetooth: hci9: command tx timeout [ 602.624215][ T5253] Bluetooth: hci11: command tx timeout [ 604.098123][ T5253] Bluetooth: hci12: command tx timeout [ 604.103681][ T5253] Bluetooth: hci10: command tx timeout [ 604.270299][T20019] Bluetooth: hci13: command tx timeout [ 604.877331][ T5253] Bluetooth: hci11: command tx timeout [ 606.350308][ T5253] Bluetooth: hci12: command tx timeout [ 606.523507][ T5253] Bluetooth: hci13: command tx timeout [ 607.130586][ T5253] Bluetooth: hci11: command tx timeout [ 608.603663][ T5253] Bluetooth: hci12: command tx timeout [ 608.787965][ T5253] Bluetooth: hci13: command tx timeout [ 609.888898][ T2526] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.018617][T20647] netlink: 'syz.4.6625': attribute type 1 has an invalid length. [ 610.057051][T20647] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.6625'. [ 610.100270][T20647] netlink: 'syz.4.6625': attribute type 1 has an invalid length. [ 610.270964][T20621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.032843][ T5253] Bluetooth: hci13: command tx timeout [ 612.394324][ T2526] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.444621][ T30] INFO: task syz.4.5473:17830 blocked for more than 143 seconds. [ 617.452411][ T30] Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 617.477086][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.485829][ T30] task:syz.4.5473 state:D stack:25344 pid:17830 tgid:17826 ppid:5232 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 617.563550][ T30] Call Trace: [ 617.567750][ T30] [ 617.570713][ T30] __schedule+0x1895/0x4b30 [ 617.678018][ T30] ? __pfx___schedule+0x10/0x10 [ 617.710604][ T30] ? __pfx_lock_release+0x10/0x10 [ 617.765479][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 617.784143][ T30] ? schedule+0x90/0x320 [ 617.788448][ T30] schedule+0x14b/0x320 [ 617.823664][ T30] schedule_preempt_disabled+0x13/0x30 [ 617.829177][ T30] __mutex_lock+0x6a7/0xd70 [ 617.833729][ T30] ? __mutex_lock+0x52a/0xd70 [ 617.867034][ T30] ? exfat_sync_fs+0xb0/0x160 [ 617.871864][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 617.876955][ T30] ? super_lock+0x2d6/0x400 [ 617.912334][ T30] ? __pfx_super_lock+0x10/0x10 [ 617.917271][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.953707][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 617.958968][ T30] exfat_sync_fs+0xb0/0x160 [ 617.963522][ T30] iterate_supers+0xc8/0x190 [ 617.997403][ T30] ? __pfx_sync_fs_one_sb+0x10/0x10 [ 618.002659][ T30] ksys_sync+0xdb/0x1c0 [ 618.006859][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 618.040228][ T30] ? do_syscall_64+0x100/0x230 [ 618.045040][ T30] ? do_syscall_64+0xb6/0x230 [ 618.049750][ T30] __do_sys_sync+0xe/0x20 [ 618.092782][ T30] do_syscall_64+0xf3/0x230 [ 618.105348][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.111296][ T30] RIP: 0033:0x7fbca297dff9 [ 618.115779][ T30] RSP: 002b:00007fbca3739038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 618.181126][ T30] RAX: ffffffffffffffda RBX: 00007fbca2b35f80 RCX: 00007fbca297dff9 [ 618.189171][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.235526][ T30] RBP: 00007fbca29f0296 R08: 0000000000000000 R09: 0000000000000000 [ 618.243649][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.299410][ T30] R13: 0000000000000000 R14: 00007fbca2b35f80 R15: 00007fff1fbff9f8 [ 618.321953][ T30] [ 618.333572][ T30] [ 618.333572][ T30] Showing all locks held in the system: [ 618.341311][ T30] 2 locks held by ksoftirqd/1/24: [ 618.389143][ T30] 1 lock held by khungtaskd/30: [ 618.394063][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 618.441031][ T30] 3 locks held by kworker/u8:2/35: [ 618.446310][ T30] #0: ffff88802df71948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 618.517583][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 618.549459][ T30] #2: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 618.559113][ T30] 3 locks held by kworker/u8:5/967: [ 618.603785][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 618.645771][ T30] #1: ffffc90003b27d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 618.690326][ T30] #2: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 618.699464][ T30] 3 locks held by kworker/u8:6/1901: [ 618.743753][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 618.778942][ T30] #1: ffffc90004abfd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 618.818436][ T30] #2: ffffffff9a620398 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 618.863661][ T30] 6 locks held by kworker/u8:7/2526: [ 618.869020][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 618.918019][ T30] #1: ffffc90009537d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 618.961347][ T30] #2: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 618.970900][ T30] #3: ffff88805f1250e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 619.017385][ T30] #4: ffff88805f126250 (&devlink->lock_key#4){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 619.058562][ T30] #5: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 619.067603][ T30] 2 locks held by getty/4987: [ 619.102076][ T30] #0: ffff88814c1750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 619.111976][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 619.167284][ T30] 3 locks held by syz-executor/5230: [ 619.172654][ T30] 2 locks held by syz.4.5473/17830: [ 619.199568][ T30] #0: ffff8880605460e0 (&type->s_umount_key#65){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 619.209547][ T30] #1: ffff8880605420e8 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160 [ 619.252738][ T30] 2 locks held by syz.0.5693/18357: [ 619.286391][ T30] #0: ffff8880605460e0 (&type->s_umount_key#65){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 619.296451][ T30] #1: ffff8880605420e8 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160 [ 619.362512][ T30] 2 locks held by syz-executor/20612: [ 619.367956][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 619.405509][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 619.415672][ T30] 1 lock held by syz.0.6630/20661: [ 619.453153][ T30] #0: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 619.494208][ T30] 2 locks held by syz.1.6635/20671: [ 619.499468][ T30] #0: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 619.549707][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 619.585231][ T30] 1 lock held by syz-executor/20674: [ 619.632777][ T30] #0: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 619.642328][ T30] 2 locks held by syz-executor/20680: [ 619.675987][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 619.685737][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 619.732603][ T30] 2 locks held by syz-executor/20683: [ 619.738057][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 619.795368][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 619.805520][ T30] 2 locks held by syz-executor/20686: [ 619.838855][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 619.848356][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 619.903967][ T30] 2 locks held by syz-executor/20689: [ 619.909411][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 619.958237][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 619.981638][ T30] [ 619.983996][ T30] ============================================= [ 619.983996][ T30] [ 620.026305][ T30] NMI backtrace for cpu 0 [ 620.030662][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 620.041189][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 620.051350][ T30] Call Trace: [ 620.054645][ T30] [ 620.057596][ T30] dump_stack_lvl+0x241/0x360 [ 620.062311][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.067535][ T30] ? __pfx__printk+0x10/0x10 [ 620.072180][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 620.077155][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 620.082643][ T30] ? _printk+0xd5/0x120 [ 620.086839][ T30] ? __pfx__printk+0x10/0x10 [ 620.091466][ T30] ? __wake_up_klogd+0xcc/0x110 [ 620.096356][ T30] ? __pfx__printk+0x10/0x10 [ 620.100986][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.106646][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 620.111787][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 620.117803][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 620.123820][ T30] watchdog+0xff4/0x1040 [ 620.128101][ T30] ? watchdog+0x1ea/0x1040 [ 620.132555][ T30] ? __pfx_watchdog+0x10/0x10 [ 620.137270][ T30] kthread+0x2f2/0x390 [ 620.141362][ T30] ? __pfx_watchdog+0x10/0x10 [ 620.146070][ T30] ? __pfx_kthread+0x10/0x10 [ 620.150698][ T30] ret_from_fork+0x4d/0x80 [ 620.155153][ T30] ? __pfx_kthread+0x10/0x10 [ 620.159770][ T30] ret_from_fork_asm+0x1a/0x30 [ 620.164589][ T30] [ 620.169363][ T30] Sending NMI from CPU 0 to CPUs 1: [ 620.175552][ C1] NMI backtrace for cpu 1 [ 620.175569][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 620.175596][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 620.175610][ C1] RIP: 0010:unwind_next_frame+0x5f/0x22d0 [ 620.175645][ C1] Code: 20 00 74 08 48 89 df e8 5f 31 bd 00 48 89 5c 24 18 4d 8b 75 48 49 8d 6d 38 48 89 e8 48 c1 e8 03 48 89 44 24 58 42 80 3c 20 00 <74> 08 48 89 ef e8 37 31 bd 00 49 8b 4d 38 4c 89 eb 48 c1 eb 03 42 [ 620.175666][ C1] RSP: 0018:ffffc900001e6810 EFLAGS: 00000246 [ 620.175691][ C1] RAX: 1ffff9200003cd23 RBX: ffffc900001e6928 RCX: ffffffff917bb000 [ 620.175711][ C1] RDX: dffffc0000000000 RSI: ffffffff81608e02 RDI: ffffc900001e68e0 [ 620.175729][ C1] RBP: ffffc900001e6918 R08: 0000000000000013 R09: ffffc900001e69d0 [ 620.175747][ C1] R10: dffffc0000000000 R11: ffffffff8180a0e0 R12: dffffc0000000000 [ 620.175765][ C1] R13: ffffc900001e68e0 R14: ffffffff81608e02 R15: 0000000000000000 [ 620.175786][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 620.175806][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.175823][ C1] CR2: 0000001b2f517ff8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 620.175843][ C1] Call Trace: [ 620.175851][ C1] [ 620.175862][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 620.175894][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 620.175939][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 620.175968][ C1] ? nmi_handle+0x2a/0x5a0 [ 620.176004][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 620.176038][ C1] ? nmi_handle+0x151/0x5a0 [ 620.176063][ C1] ? nmi_handle+0x2a/0x5a0 [ 620.176094][ C1] ? unwind_next_frame+0x5f/0x22d0 [ 620.176120][ C1] ? default_do_nmi+0x63/0x160 [ 620.176152][ C1] ? exc_nmi+0x123/0x1f0 [ 620.176181][ C1] ? end_repeat_nmi+0xf/0x53 [ 620.176206][ C1] ? kthread+0x2f2/0x390 [ 620.176231][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.176264][ C1] ? __init_begin+0x41000/0x41000 [ 620.176290][ C1] ? kthread+0x2f2/0x390 [ 620.176313][ C1] ? unwind_next_frame+0x5f/0x22d0 [ 620.176336][ C1] ? unwind_next_frame+0x5f/0x22d0 [ 620.176361][ C1] ? unwind_next_frame+0x5f/0x22d0 [ 620.176385][ C1] [ 620.176393][ C1] [ 620.176408][ C1] ? smpboot_thread_fn+0x546/0xa30 [ 620.176442][ C1] ? kthread+0x2f2/0x390 [ 620.176465][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.176491][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.176522][ C1] arch_stack_walk+0x11c/0x150 [ 620.176553][ C1] ? kthread+0x2f2/0x390 [ 620.176599][ C1] stack_trace_save+0x118/0x1d0 [ 620.176627][ C1] ? stack_trace_save+0x118/0x1d0 [ 620.176655][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 620.176686][ C1] ? __asan_memset+0x23/0x50 [ 620.176723][ C1] ? unwind_next_frame+0x193b/0x22d0 [ 620.176751][ C1] kasan_save_track+0x3f/0x80 [ 620.176774][ C1] ? kasan_save_track+0x3f/0x80 [ 620.176797][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 620.176822][ C1] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 620.176856][ C1] ? __alloc_skb+0x1c3/0x440 [ 620.176878][ C1] ? synproxy_send_client_synack+0x1ba/0xf30 [ 620.176917][ C1] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 620.176953][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 620.176987][ C1] ? nft_do_chain+0x4af/0x1da0 [ 620.177022][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 620.177056][ C1] ? nf_hook_slow+0xc5/0x220 [ 620.177087][ C1] ? NF_HOOK+0x29e/0x450 [ 620.177112][ C1] ? NF_HOOK+0x3a6/0x450 [ 620.177136][ C1] ? __netif_receive_skb+0x2bf/0x650 [ 620.177166][ C1] ? process_backlog+0x662/0x15b0 [ 620.177196][ C1] ? __napi_poll+0xcd/0x490 [ 620.177223][ C1] ? net_rx_action+0x89b/0x1240 [ 620.177254][ C1] ? handle_softirqs+0x2c7/0x980 [ 620.177285][ C1] ? run_ksoftirqd+0xca/0x130 [ 620.177319][ C1] ? smpboot_thread_fn+0x546/0xa30 [ 620.177357][ C1] ? kthread+0x2f2/0x390 [ 620.177405][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.177433][ C1] __kasan_slab_alloc+0x66/0x80 [ 620.177459][ C1] ? __alloc_skb+0x1c3/0x440 [ 620.177481][ C1] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 620.177518][ C1] __alloc_skb+0x1c3/0x440 [ 620.177544][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 620.177567][ C1] ? __entry_text_end+0x1020c5/0x1020c9 [ 620.177598][ C1] synproxy_send_client_synack+0x1ba/0xf30 [ 620.177636][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 620.177660][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 620.177698][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 620.177731][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.177760][ C1] ? synproxy_pernet+0x45/0x270 [ 620.177794][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.177823][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 620.177863][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 620.177901][ C1] ? nf_ip_checksum+0x13a/0x500 [ 620.177945][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 620.177985][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 620.178019][ C1] ? validate_chain+0x11e/0x5920 [ 620.178045][ C1] ? __queue_work+0x199/0xf50 [ 620.178083][ C1] ? __pfx_validate_chain+0x10/0x10 [ 620.178116][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.178150][ C1] nft_do_chain+0x4af/0x1da0 [ 620.178196][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 620.178231][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 620.178268][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.178307][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 620.178336][ C1] nft_do_chain_inet+0x418/0x6b0 [ 620.178373][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 620.178408][ C1] ? ipt_do_table+0x312/0x1860 [ 620.178456][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 620.178491][ C1] nf_hook_slow+0xc5/0x220 [ 620.178522][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 620.178550][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 620.178579][ C1] NF_HOOK+0x29e/0x450 [ 620.178604][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.178633][ C1] ? NF_HOOK+0x9a/0x450 [ 620.178658][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 620.178687][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 620.178719][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.178744][ C1] ? ip_rcv_finish+0x406/0x560 [ 620.178773][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 620.178800][ C1] NF_HOOK+0x3a6/0x450 [ 620.178825][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.178851][ C1] ? __lock_acquire+0x1384/0x2050 [ 620.178888][ C1] ? NF_HOOK+0x9a/0x450 [ 620.178918][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 620.178944][ C1] ? ip_rcv_core+0x801/0xd10 [ 620.178972][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 620.179005][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 620.179033][ C1] __netif_receive_skb+0x2bf/0x650 [ 620.179064][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 620.179099][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 620.179128][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 620.179165][ C1] ? __pfx_lock_release+0x10/0x10 [ 620.179201][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 620.179245][ C1] process_backlog+0x662/0x15b0 [ 620.179280][ C1] ? process_backlog+0x33b/0x15b0 [ 620.179318][ C1] ? __pfx_process_backlog+0x10/0x10 [ 620.179349][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 620.179388][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 620.179427][ C1] __napi_poll+0xcd/0x490 [ 620.179459][ C1] net_rx_action+0x89b/0x1240 [ 620.179505][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 620.179536][ C1] ? __run_timer_base+0x178/0x8e0 [ 620.179568][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 620.179627][ C1] handle_softirqs+0x2c7/0x980 [ 620.179663][ C1] ? run_ksoftirqd+0xca/0x130 [ 620.179700][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 620.179735][ C1] ? preempt_schedule+0xe1/0xf0 [ 620.179776][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.179809][ C1] run_ksoftirqd+0xca/0x130 [ 620.179849][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 620.179891][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.179921][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 620.179956][ C1] ? smpboot_thread_fn+0x2d3/0xa30 [ 620.179989][ C1] ? smpboot_thread_fn+0x4fb/0xa30 [ 620.180025][ C1] ? smpboot_thread_fn+0x656/0xa30 [ 620.180062][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 620.180100][ C1] smpboot_thread_fn+0x546/0xa30 [ 620.180137][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 620.180174][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 620.180208][ C1] kthread+0x2f2/0x390 [ 620.180231][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 620.180268][ C1] ? __pfx_kthread+0x10/0x10 [ 620.180297][ C1] ret_from_fork+0x4d/0x80 [ 620.180334][ C1] ? __pfx_kthread+0x10/0x10 [ 620.180360][ C1] ret_from_fork_asm+0x1a/0x30 [ 620.180405][ C1] [ 621.235787][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 621.242694][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 621.253215][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.263289][ T30] Call Trace: [ 621.266584][ T30] [ 621.269533][ T30] dump_stack_lvl+0x241/0x360 [ 621.274244][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.279477][ T30] ? __pfx__printk+0x10/0x10 [ 621.284103][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 621.290127][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.295784][ T30] ? vscnprintf+0x5d/0x90 [ 621.300143][ T30] panic+0x349/0x880 [ 621.304072][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.309732][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 621.315920][ T30] ? __pfx_panic+0x10/0x10 [ 621.320805][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 621.326206][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.331982][ T30] ? __irq_work_queue_local+0x137/0x410 [ 621.337569][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.343226][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 621.348625][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 621.354809][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 621.360994][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.366654][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 621.372843][ T30] watchdog+0x1033/0x1040 [ 621.377217][ T30] ? watchdog+0x1ea/0x1040 [ 621.381673][ T30] ? __pfx_watchdog+0x10/0x10 [ 621.386382][ T30] kthread+0x2f2/0x390 [ 621.390473][ T30] ? __pfx_watchdog+0x10/0x10 [ 621.395181][ T30] ? __pfx_kthread+0x10/0x10 [ 621.399798][ T30] ret_from_fork+0x4d/0x80 [ 621.404249][ T30] ? __pfx_kthread+0x10/0x10 [ 621.408863][ T30] ret_from_fork_asm+0x1a/0x30 [ 621.413682][ T30] [ 621.417037][ T30] Kernel Offset: disabled [ 621.421359][ T30] Rebooting in 86400 seconds..